clarification

1 files changed, 5 insertions, 2 deletions

diff --git a/core/api-merchant.rst b/core/api-merchant.rst
index bb78f470..76c97a4c 100644
--- a/core/api-merchant.rst
+++ b/core/api-merchant.rst
@@ -941,9 +941,12 @@ Setting up instances
       method: "external" | "token";
 
       // For method "external", this field is mandatory.
-      // It specifies the "Authentication" HTTP header required to
-      // authorize management to access the instance.
+      // The token MUST begin with the string "secret-token:".
+      // After the auth token has been set (with method "token"),
+      // the value must be provided in a "Authorization: Bearer $token"
+      // header.
       token?: string;
+
     }